Well, I have changed to ejb-ref and ejb-local-ref's to be relative links rather than absolute. That has enabled me to set TRACE logging now. I am investigating further now as to what is happing with SecurityAssociation. Will post later.
I guess this is covered by http://jira.jboss.com/jira/browse/JBAS-1862.
Will try to see if I can't convince my admin to at least perform a patch.
have fun, and hope this helps someone else someday, cgriffith